How to Protect Your BVN and NIN From Unauthorised Requests

Your Bank Verification Number (BVN) and National Identification Number (NIN) are important identity details. They may be required for legitimate banking, identification or government-related processes, but they can also be targeted by scammers who want to impersonate you, access accounts or pressure you into revealing more sensitive information.

The safest approach is simple: do not provide your BVN or NIN just because someone asks. First identify who is requesting it, why it is needed, how it will be collected and whether the request comes through an official channel.

What your BVN and NIN are used for

Your BVN is linked to your banking identity in Nigeria. A bank or regulated financial service may request it for account-related verification, identity matching or compliance processes.

Your NIN is a national identity number used for identification and for some services that require identity verification. It may be requested during certain official applications or onboarding processes.

However, having a legitimate reason to request an identity number does not make every message, phone call or online form genuine. Criminals often use real-sounding explanations such as account upgrades, loan applications, SIM-related issues, job offers, grants or verification exercises.

Information you should never share together with your BVN or NIN

A BVN or NIN is sensitive, but it is not the same as a password. It should never be treated as permission for someone to collect all your security information.

Do not disclose your:

• Banking PIN or card PIN
• One-time password (OTP)
• Internet or mobile banking password
• ATM card number, expiry date or CVV
• Email password or phone unlock code
• Account recovery code
• Cryptocurrency recovery phrase or private key

A person who asks for your BVN or NIN and then demands an OTP, PIN or password is displaying a serious warning sign. End the conversation and contact the organisation through a trusted channel.

How to recognise an unauthorised request

Pressure and threats

Scammers may say your account will be blocked immediately, your money will be lost, your application will be cancelled or your phone line will stop working unless you act at once. Urgency is often used to prevent you from checking the story.

Unexpected contact

Be cautious when a request arrives through an unsolicited WhatsApp message, social media direct message, personal email address or unfamiliar phone number. A logo, name or profile picture does not prove that the sender is genuine.

Suspicious links and forms

Do not enter your identity details into a link simply because it was forwarded by a friend or appears to use official-looking language. Look carefully at the website address and avoid shortened links when you cannot confirm where they lead.

Unclear purpose

A legitimate organisation should be able to explain why it needs your information and how the information will be used. “Verification” without a clear explanation is not enough.

Requests for payment

A demand to pay an individual before your identity can be “verified”, especially through a personal account, should be treated with caution. Payment demands can be part of fake loan, recruitment, scholarship, grant or account-recovery scams.

How to verify a request safely

1. Pause. Do not reply immediately, click a link or share a code because someone says the matter is urgent.
2. Identify the organisation. Find out whether the request is supposedly from your bank, a government agency, an employer, a school or another service provider.
3. Use an independent contact route. Open the organisation’s official website or mobile application yourself. Use a verified customer-service number, secure in-app channel or branch—not the contact details supplied by the suspicious sender.
4. Ask what is required. Confirm whether the organisation genuinely needs your BVN or NIN, whether there is a secure way to submit it and what information it will never ask you to disclose.
5. Check the application or transaction. If you did not start an account opening, loan, job application or other process, ask why your details are being requested.
6. Keep evidence. Save the phone number, message, email, website address, payment details and screenshots. Do not continue arguing with the sender.

Safer ways to submit identity information

When a request is verified, submit information only through the organisation’s official platform, secure application, approved branch or clearly identified service channel. Avoid sending identity numbers in public comments, group chats or open social media messages.

Before uploading a document, check that:

• You are using the correct official website or application.
• The connection is secure and the page is not a lookalike site.
• The form identifies the organisation responsible for collecting the data.
• You understand the purpose of the request.
• You are not being asked for unrelated secrets such as your PIN or OTP.

Do not post pictures of your identity documents online to prove that an offer, job or account is genuine. Publicly shared documents can be copied, edited or reused by criminals.

What to do if you have already shared your BVN or NIN

Do not panic, but act promptly. Sharing a BVN or NIN alone does not automatically give someone access to your bank account. The risk becomes greater if you also shared a password, OTP, PIN, card details or allowed someone to control your phone.

Take these steps:

1. Contact your bank through its official channel. Explain what happened and ask whether additional security measures are needed on your account.
2. Change exposed credentials. If you shared a password, change it immediately from a trusted device. Do not reuse the same password on other accounts.
3. Report unauthorised transactions quickly. Use your bank’s official fraud or customer-support process if you notice an unfamiliar transaction or alert.
4. Secure your email and phone. Check for unfamiliar devices, changed recovery details, call-forwarding settings or newly installed applications.
5. Preserve evidence. Keep messages, receipts, numbers and screenshots for the bank, platform or relevant authorities.
6. Warn anyone else involved. If the request came through a fake recruiter, lender, landlord or seller, tell others not to continue the conversation.

If you surrendered control of your phone, installed remote-access software or disclosed an OTP, treat the incident as urgent. Contact your bank immediately and secure the affected email, mobile and financial accounts.

A quick decision rule

Before sharing your BVN or NIN, ask four questions:

• Did I start this process?
• Can I independently confirm the organisation?
• Is the purpose clear and relevant?
• Am I being asked for a PIN, password, OTP, payment or unusual access?

If the first three answers are not clear, stop and verify. If the last answer is yes, do not proceed through that contact.

Protecting your identity in everyday online activities

Nigerians often submit personal information while applying for jobs, scholarships, admissions, travel opportunities, financial services and online accounts. Students, jobseekers, entrepreneurs and people using mobile banking should be especially careful with forms shared in WhatsApp groups or social media communities.

Use separate, strong passwords for important accounts, keep your phone’s operating system and applications updated, and enable available account alerts and multi-factor security. Review messages carefully before clicking links, even when they appear to come from a familiar organisation.

The key takeaway

Your BVN and NIN should be shared only when there is a genuine, understandable need and the receiving organisation has been independently verified. Never combine those details with your PIN, password or OTP. When a request creates fear, urgency or confusion, pause first—the safest response is to verify through an official channel, not to obey the message.